Security Advisory
CVE-2008-6321
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
CF Shopkart 5.2.2 stores cfshopkart52.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via a direct request.